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Remarks 

Upon entry of the foregoing Amendment claims 1-31 are pending in the application. 
Claims 1, 3, 6, 8, 10, 13, 16, 19, 21, 23, 21, and 30-31 have been amended. No claims are 
cancelled or newly added. Applicant believes that this Amendment does not add new matter. 
In view of the foregoing Amendment and following Remarks, allowance of all the pending 
claims is requested. 

Examiner Interview 

Applicants thank Examiner Paliwal for granting Applicants' representative the courtesy 
of a telephonic Examiner Interview. During the Examiner interview, Applicants' representative 
discussed the claims in light of the rejections as set forth below in further detail. 

Claim Objections 

The Examiner has objected to claims 3, 23, and 31 because of alleged informalities. 
Applicants note that claims 3, 23, and 31 have been amended to further clarify various aspects 
of the invention, and submit that these amendments fully address the objections that the 
Examiner has raised. Accordingly, Applicants request that the Examiner withdraw this 
objection to the claims. 

Rejection Under 35 U.S.C. § 112 

The Examiner has rejected claims 8 and 21 under 35 U.S.C. § 112, first paragraph, as 
allegedly failing to comply with the written description requirement. In particular, the 
Examiner alleges that claims 8 and 21 contain subject matter which was not described in the 
original specification in such a way as to reasonably convey that Applicants possessed the 
claimed invention at the time the application was filed. 

Although Applicants disagree with the propriety of the rejection, solely in an effort to 
expedite prosecution, claims 8 and 21 have been amended to further clarify various aspects of 
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the invention. Applicants submit that the original specification fully supports the amended 
claim language. Accordingly, Applicants request that the Examiner withdraw this rejection of 
the claims. 

Rejection Under 35 U.S.C. § 103 

The Examiner has rejected claims 1-8, 12-14, 16-21, 23, 25-28, and 30-31 under 35 
U.S.C. § 103 as allegedly being unpatentable over U.S. Patent No. 6,772,345 to Shetty 
("Shetty") in view of "An Adaptive Security Model for Mobile Agents in Wireless Networks" to 
Alampalayam et al. ("Alampalayam"). This rejection is improper and should be withdrawn for 
at least the reason that Shetty and Alampalayam, either alone or in combination, do not 
disclose, teach, or suggest each and every feature of the claimed invention. 

More particularly, neither Shetty nor Alampalayam, either alone or in combination, 
disclose, teach, or suggest at least the feature of "monitoring the received packets to identify 
one or more of the packets that include information associated with an attack signature, the 
attack signature associated with one or more previous attacks directed at the target system," 
as recited in claim 1, for example. 

Rather, Shetty only describes a process for "malware scanning of data that is being 
transferred or downloaded to a computer system" (col. 1, lines 57-60). While Shetty generally 
describes "scanning the data stream at a protocol level to detect a malware," Shetty does not 
disclose, teach, or suggest that the malware is detected by identifying "information associated 
with an attack signature, the attack signature associated with one or more previous attacks 
directed at the target system." Instead, Shetty only provides that "typical computer malware is 
a program or piece of code that . . . performs some undesired actions on a computer" (col. 2, 
lines 54-57). Thus, for at least this reason, Shetty does not disclose, teach, or suggest at least 
the feature of "monitoring the received packets to identify one or more of the packets that 
include information associated with an attack signature, the attack signature associated with 
one or more previous attacks directed at the target system," as recited in claim 1, for 
example. 
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Moreover, Shetty specifically indicates that "protocol filters scan the traffic data stream 
for malwares" (col. 3, lines 17-20), distinguishing a "packet filter [that] looks at each packet 
entering or leaving the network and accepts or rejects it based on user-defined rules" (col. 5, 
lines 9-11). Thus, Shetty scans a data stream in a manner that depends on protocol 
information associated with the data stream, rather than packet information associated 
therewith. Accordingly, for at least this reason, Shetty does not disclose, teach, or suggest at 
least the feature of "monitoring the received packets to identify one or more of the packets 
that include information associated with an attack signature, the attack signature associated 
with one or more previous attacks directed at the target system/' as recited in claim 1, for 
example. 

Alampalayam fails to cure the aforementioned deficiencies of Shetty. Specifically, 
Alampalayam describes a "security model [that] uses feedback control scheme" in which 
"various parameters of an agent node or set of nodes are monitored. If these parameters 
change rapidly in a given time frame, appropriate threat is identified" (Section 2.2). As such, 
Alampalayam monitors network parameters, not "received packets," as recited in claim 1, for 
example. Moreover, Alampalayam identifies threats based on changes to values of the 
parameters, not based on "an attack signature . . . associated with one or more previous 
attacks directed at the target system," as recited in claim 1, for example. Accordingly, for at 
least these reasons, Alampalayam fails to cure the aforementioned deficiencies of Shetty. 

Accordingly, for at least the foregoing reasons, Shetty and Alampalayam, either alone or 
in combination, fail to disclose, teach, or suggest every feature recited in claim 1, including at 
least the feature of "monitoring the received packets to identify one or more of the packets 
that include information associated with an attack signature, the attack signature associated 
with one or more previous attacks directed at the target system." The rejection is therefore 
improper and should be withdrawn. 

Claims 10, 16, and 23 include features similar to those discussed above in reference to 
claim 1. Claims 2-8, 12-14, 17-21, 25-28, and 30-31 depend from and add features to one of 
claims 1, 10, 16, and 23. Thus, the rejection of these claims is likewise improper and should be 
withdrawn for at least the same reasons. 
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The Examiner has also rejected claims 9, 11, 15, 22, 24, and 29 under § 103 as allegedly 
being unpatentable over Shetty in view of Alampalayam and further in view of U.S. Patent 
Application Pub. No. 2002/0166063 to Lachman, III et al. ("Lachman"). This rejection is also 
improper and should be withdrawn for at least the reason that Shetty, Alampalayam, and 
Lachman, either alone or in combination, do not disclose, teach, or suggest each and every 
feature of the claimed invention. 

More particularly, for at least the reasons given above, Shetty and Alampalayam, either 
alone or in combination, fail to disclose, teach, or suggest at least the feature of "monitoring 
the received packets to identify one or more of the packets that include information associated 
with an attack signature, the attack signature associated with one or more previous attacks 
directed at the target system," as recited in claim 1, for example. Lachman fails to cure at least 
this deficiency of Shetty and Alampalayam. 

Accordingly, for at least the foregoing reasons, Shetty, Alampalayam, and Lachman, 
either alone or in combination, do not disclose, teach, or suggest each and every feature of 
claim 1. Claims 10, 16, and 23 include features similar to those discussed above in reference to 
claim 1. Claims 9, 11, 15, 22, 24, and 29 depend from and add features to one of claims 1, 10, 
16, and 23. The rejection of these claims is therefore improper and should be withdrawn for at 
least this reason. 
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Conclusion 



Having addressed each of the foregoing rejections, it is respectfully submitted that a full 
and complete response has been made to the outstanding Office Action and, as such, the 
application is in condition for allowance. Notice to that effect is respectfully requested. 

If the Examiner believes, for any reason, that personal communication will expedite 
prosecution of this application, the Examiner is invited to telephone the undersigned at the 
number provided. 

Date: December 5, 2007 Respectfully submitted, 
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